[
https://issues.apache.org/jira/browse/SENTRY-810?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14639878#comment-14639878
]
Hadoop QA commented on SENTRY-810:
----------------------------------
Here are the results of testing the latest attachment
https://issues.apache.org/jira/secure/attachment/12746936/SENTRY-810.patch
against master.
{color:red}Overall:{color} -1 due to 7 errors
{color:red}ERROR:{color} mvn test exited 1
{color:red}ERROR:{color} Failed:
org.apache.sentry.tests.e2e.hive.TestUriPermissions
{color:red}ERROR:{color} Failed: org.apache.sentry.tests.e2e.hive.TestOperations
{color:red}ERROR:{color} Failed:
org.apache.sentry.tests.e2e.dbprovider.TestDbOperations
{color:red}ERROR:{color} Failed:
org.apache.sentry.tests.e2e.dbprovider.TestDbUriPermissions
{color:red}ERROR:{color} Failed:
org.apache.sentry.tests.e2e.dbprovider.TestDbPrivilegesAtDatabaseScope
{color:red}ERROR:{color} Failed:
org.apache.sentry.tests.e2e.hive.TestPrivilegesAtDatabaseScope
Console output: https://builds.apache.org/job/PreCommit-SENTRY-Build/719/console
This message is automatically generated.
> CTAS vulnerability
> -------------------
>
> Key: SENTRY-810
> URL: https://issues.apache.org/jira/browse/SENTRY-810
> Project: Sentry
> Issue Type: Bug
> Components: Hive Plugin
> Reporter: Ryan P
> Assignee: Ryan P
> Attachments: SENTRY-810.patch, SENTRY-810.patch
>
>
> HIVE-11319 puts us in an awkward situation where you can leverage your
> current permissions to overwrite existing directories. I recommend we edit
> the CTAS permissions map to reflect that of a true insert overwrite
> directory. This will be annoying for users trying to do legit CTAS operations
> within the warehouse but as it stands it leave a gaping hole in the security
> model
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
